Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
File:                     rSHpWiYaLoAl4zypVIJcFHCzt6M.mft (raw, json)
Hash identifier:          rBEQut74Mt5rE4t1GGO02ouOpjEs6R2HI1RDMq4S1yc=
Subject key identifier:   26:89:06:C6:56:0B:CF:2C:A5:2E:BD:67:F5:23:D5:EC:C2:C5:65:71
Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3
Certificate issuer:       /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3
Certificate serial:       07CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
Manifest number:          07C3
Signing time:             Tue 12 May 2026 21:28:45 +0000
Manifest this update:     Tue 12 May 2026 21:28:45 +0000
Manifest next update:     Tue 19 May 2026 21:28:45 +0000
Files and hashes:         1: rSHpWiYaLoAl4zypVIJcFHCzt6M.crl (hash: D/nKtWTDut9jizbi5Wbbd+QiF8GX6T/FEqRd2nMU40M=)
                          2: B855A21C3E1211EB8D23EB6CC4F9AE02.roa (hash: l3JeAQ3S0YOaZPvLg1VADUfgUPauzx1iQ/ocLZ5FTmk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl
                          rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91508C4, serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3
        Validity
            Not Before: May 12 21:28:45 2026 GMT
            Not After : May 19 21:28:45 2026 GMT
        Subject: CN=6a039b8d-4adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:4c:1b:61:87:ec:20:8b:bd:9d:32:7c:fb:
                    6e:af:f9:89:63:51:19:65:65:fd:d6:f3:e0:47:39:
                    91:0d:9b:f6:ec:b0:ff:cd:44:3c:e3:47:37:ec:da:
                    f2:3a:84:d9:49:a9:12:71:07:f1:bc:f6:73:0c:d1:
                    9e:87:42:09:83:94:29:b6:7a:a7:c6:0e:f0:f9:7f:
                    a6:16:31:14:d6:8a:1e:6c:ca:2f:d9:86:c6:58:83:
                    8f:6d:72:df:c8:0b:26:80:40:bf:7e:76:11:38:74:
                    ae:34:a3:b3:9b:1a:3e:19:b1:91:06:4f:48:30:3d:
                    68:bd:fc:62:f3:98:da:b0:f2:ea:6c:53:03:8a:0b:
                    ba:73:0a:0c:1f:eb:72:2b:f3:da:2d:a1:03:10:cb:
                    2a:cb:69:96:bb:7b:49:e8:12:65:7c:40:f7:70:68:
                    b7:83:78:ae:2b:b4:0a:b0:20:8c:3d:47:7f:56:35:
                    dc:8a:f3:62:26:f8:82:79:96:0e:85:e7:67:80:f1:
                    93:6d:18:73:57:2f:52:7e:b6:e1:e3:c3:2f:70:9d:
                    01:42:55:fc:2e:73:c8:8e:1e:fb:a8:1d:3b:94:96:
                    75:b1:3e:0b:ae:32:ef:f0:06:ec:62:59:01:14:1d:
                    8b:22:98:fe:9a:dc:b0:9c:78:b2:8d:1f:c6:b3:02:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:89:06:C6:56:0B:CF:2C:A5:2E:BD:67:F5:23:D5:EC:C2:C5:65:71
            X509v3 Authority Key Identifier:
                keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d3:a3:d5:e3:04:3a:d2:e2:33:ec:3b:78:38:da:d6:e9:1d:
         9e:3d:9c:c5:24:8e:ec:d9:e2:e2:81:44:59:11:05:b5:c7:6f:
         a3:0d:68:ca:29:ec:35:4c:40:02:6a:3c:0b:14:dd:cf:54:99:
         b7:8b:e6:e5:64:d8:34:91:71:14:b0:f8:6d:3c:7f:1d:d1:12:
         6e:42:7c:ae:da:9c:ba:78:33:0d:62:1c:6c:e5:27:2e:a0:86:
         ce:08:5a:0c:2b:5a:c9:d4:42:23:f6:78:ed:c9:17:6b:ca:03:
         96:bd:68:f5:36:83:d5:0d:80:4f:90:19:73:70:dc:73:4d:15:
         86:62:0b:ec:cd:d8:9f:ff:05:70:66:a2:0e:46:00:87:9d:4b:
         b0:81:64:dd:e5:e7:87:48:4a:e2:6b:2a:2a:d7:e8:59:6c:48:
         3b:17:3f:bb:b4:e2:8d:7d:b0:f9:88:c3:78:e0:9c:00:3e:65:
         7b:e8:1e:3c:2a:de:e2:4d:02:33:2e:5a:9b:db:f2:b5:69:b3:
         f9:62:34:65:e4:1c:5a:9a:94:a0:ba:74:d3:5b:2f:2d:5e:3a:
         98:8b:d8:c0:2a:db:e0:6a:d4:c2:ee:8f:15:8a:53:d5:7b:55:
         41:9f:70:4e:6b:f3:cf:ef:45:e7:63:1e:d7:2c:9f:23:79:a2:
         35:8a:eb:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA4QzQxMTAvBgNVBAUTKEFEMjFFOTVBMjYxQTJFODAyNUUzM0NBOTU0ODI1QzE0
NzBCM0I3QTMwHhcNMjYwNTEyMjEyODQ1WhcNMjYwNTE5MjEyODQ1WjAYMRYwFAYD
VQQDEw02YTAzOWI4ZC00YWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsS1MG2GH7CCLvZ0yfPtur/mJY1EZZWX91vPgRzmRDZv27LD/zUQ840c37Nry
OoTZSakScQfxvPZzDNGeh0IJg5Qptnqnxg7w+X+mFjEU1ooebMov2YbGWIOPbXLf
yAsmgEC/fnYROHSuNKOzmxo+GbGRBk9IMD1ovfxi85jasPLqbFMDigu6cwoMH+ty
K/PaLaEDEMsqy2mWu3tJ6BJlfED3cGi3g3iuK7QKsCCMPUd/VjXcivNiJviCeZYO
hedngPGTbRhzVy9Sfrbh48MvcJ0BQlX8LnPIjh77qB07lJZ1sT4LrjLv8AbsYlkB
FB2LIpj+mtywnHiyjR/GswINdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaJBsZW
C88spS69Z/Uj1ezCxWVxMB8GA1UdIwQYMBaAFK0h6VomGi6AJeM8qVSCXBRws7ej
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDhDNC81MzJGRENEQzNF
MTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxvQWw0enlwVklKY0ZIQ3p0
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JTSHBXaVlhTG9BbDR6eXBWSUpjRkhDenQ2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDhDNC81MzJGRENEQzNFMTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxv
QWw0enlwVklKY0ZIQ3p0Nk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACdOj1eMEOtLiM+w7eDja1ukdnj2cxSSO7Nni4oFEWREFtcdvow1oyinsNUxA
Amo8CxTdz1SZt4vm5WTYNJFxFLD4bTx/HdESbkJ8rtqcungzDWIcbOUnLqCGzgha
DCtaydRCI/Z47ckXa8oDlr1o9TaD1Q2AT5AZc3Dcc00VhmIL7M3Yn/8FcGaiDkYA
h51LsIFk3eXnh0hK4msqKtfoWWxIOxc/u7TijX2w+YjDeOCcAD5le+gePCre4k0C
My5am9vytWmz+WI0ZeQcWpqUoLp001svLV46mIvYwCrb4GrUwu6PFYpT1XtVQZ9w
Tmvzz+9F52Me1yyfI3miNYrr5Q==
-----END CERTIFICATE-----
Generated at Wed May 13 03:46:11 2026 by rpki-client